Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Updated an acknowledgement. This is an informational change only.
Updated product information in the Software Update table. This is an informational change only.
Updated product information in the Software Update table. This is an informational change only.
Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8...
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
FreePBX 17.0.2 - Remote Code Execution (RCE)
Metabase 0.61.0 - Authenticated Remote Code Execution
Ghost_CMS 6.19.0 - Remote Code Execution
